DisableIntrospection.php — WooCommerce 10.9.3

woocommerce / lib / packages / GraphQL / Validator / Rules / DisableIntrospection.php

woocommerce / lib / packages / GraphQL / Validator / Rules Last commit date

DisableIntrospection.php

55 lines

1	<?php declare(strict_types=1);
2
3	namespace Automattic\WooCommerce\Vendor\GraphQL\Validator\Rules;
4
5	use Automattic\WooCommerce\Vendor\GraphQL\Error\Error;
6	use Automattic\WooCommerce\Vendor\GraphQL\Language\AST\FieldNode;
7	use Automattic\WooCommerce\Vendor\GraphQL\Language\AST\NodeKind;
8	use Automattic\WooCommerce\Vendor\GraphQL\Validator\QueryValidationContext;
9
10	class DisableIntrospection extends QuerySecurityRule
11	{
12	public const ENABLED = 1;
13
14	protected int $isEnabled;
15
16	public function __construct(int $enabled)
17	{
18	$this->setEnabled($enabled);
19	}
20
21	public function setEnabled(int $enabled): void
22	{
23	$this->isEnabled = $enabled;
24	}
25
26	public function getVisitor(QueryValidationContext $context): array
27	{
28	return $this->invokeIfNeeded(
29	$context,
30	[
31	NodeKind::FIELD => static function (FieldNode $node) use ($context): void {
32	if ($node->name->value !== '__type' && $node->name->value !== '__schema') {
33	return;
34	}
35
36	$context->reportError(new Error(
37	static::introspectionDisabledMessage(),
38	[$node]
39	));
40	},
41	]
42	);
43	}
44
45	public static function introspectionDisabledMessage(): string
46	{
47	return 'Automattic\WooCommerce\Vendor\GraphQL introspection is not allowed, but the query contained __schema or __type';
48	}
49
50	protected function isEnabled(): bool
51	{
52	return $this->isEnabled !== self::DISABLED;
53	}
54	}
55